$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa File: 8af95620-011e-3ede-9167-cda01e18c471.roa (raw, json) Hash identifier: uBJLTChpmkZnV7lpbqtngFZ36pIE4LabuWVdVxK2isQ= Subject key identifier: 84:2F:8F:AB:2E:58:11:40:D8:79:39:33:29:E1:29:9B:39:4A:B3:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA09FE096BD1734B3F3FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:09:fe:09:6b:d1:73:4b:3f:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=3d7878fd-3be0-4dd5-8b9b-7ab858238560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:3e:fe:b9:32:0b:54:9c:67:1a:d6:31:14: 06:89:6e:43:f7:c3:aa:e6:1e:08:3e:0a:1e:39:5e: 95:a3:e1:d1:95:c6:70:3e:fd:32:21:83:5f:2b:4a: b6:b9:de:19:b4:21:64:7e:a2:c9:d4:85:26:88:1a: c9:09:39:50:55:a9:ab:05:06:d1:a9:df:87:dc:78: 77:42:01:54:b9:89:54:34:b9:9e:17:47:15:bc:05: 02:39:d9:c2:7e:cb:a6:65:46:6c:d1:ae:c0:81:32: a8:bf:df:42:8d:fd:a9:86:de:2e:70:9a:d7:ee:e3: 97:2d:0b:ad:a5:11:b7:d5:c5:34:4c:68:9e:9f:e6: 31:f3:06:85:08:b8:e9:bf:86:d9:d5:2d:21:87:ab: 0b:d5:70:a6:55:ce:eb:cc:17:ad:0f:74:b7:37:32: 34:b9:2c:ab:eb:01:58:71:92:b5:b2:c2:b8:67:ae: 30:2a:72:92:f5:ad:ab:c6:fb:59:5e:40:dc:6e:2e: 8c:0e:db:5a:b9:d2:03:14:91:e2:ff:4c:d4:56:7a: 5a:21:1b:06:a4:9b:68:db:07:c4:ab:bf:06:45:3e: 83:73:77:72:3a:d0:7a:ee:6c:de:3d:79:e8:a1:5f: 5f:f4:80:de:4b:8c:ba:10:61:da:33:5f:73:cf:b7: f8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2F:8F:AB:2E:58:11:40:D8:79:39:33:29:E1:29:9B:39:4A:B3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:61:2d:cb:40:bb:ef:4a:44:0e:7b:66:71:b7:85:0f:8b:0f: da:84:d9:97:46:73:34:a1:37:18:64:c4:5e:52:32:70:24:ba: 13:18:54:ec:de:a8:6c:5c:db:03:59:07:c7:d0:18:41:cb:c7: 97:f2:cb:f9:3d:7d:f9:83:ab:15:9a:f5:e8:47:3f:ab:2c:47: 0e:81:7d:bf:0d:e1:e8:1b:13:fc:df:f0:c1:c4:d4:db:5c:df: 64:da:3a:f2:77:08:56:b5:7c:69:16:ac:43:75:bf:3f:f1:f4: 5f:77:4b:09:b4:cd:eb:7a:d6:b6:64:7b:8f:98:8f:e6:78:66: fd:69:61:92:c0:d8:f6:67:b8:11:0c:b5:01:0f:dd:48:7d:15: a0:cb:22:c2:05:78:33:35:9f:d7:3d:f4:2c:a0:d5:2b:32:37: 14:eb:a9:17:30:a8:67:1b:08:06:0e:88:00:b6:25:62:33:e3: 85:42:18:65:f3:98:0a:db:f2:1e:27:72:7d:da:32:6e:fe:3b: e9:30:b4:2d:e5:83:2e:2a:6d:9b:6c:c9:0d:7f:7a:00:59:2f: d8:46:c9:43:ec:1b:65:69:a2:32:10:c4:c7:f1:40:80:9a:22: 61:23:b2:94:04:44:a5:48:73:81:b7:be:20:32:65:69:b7:f3: 4b:bf:74:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgn+CWvRc0s/P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk M2Q3ODc4ZmQtM2JlMC00ZGQ1LThiOWItN2FiODU4MjM4NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCA+/rkyC1ScZxrWMRQGiW5D98Oq5h4IPgoe OV6Vo+HRlcZwPv0yIYNfK0q2ud4ZtCFkfqLJ1IUmiBrJCTlQVamrBQbRqd+H3Hh3 QgFUuYlUNLmeF0cVvAUCOdnCfsumZUZs0a7AgTKov99Cjf2pht4ucJrX7uOXLQut pRG31cU0TGien+Yx8waFCLjpv4bZ1S0hh6sL1XCmVc7rzBetD3S3NzI0uSyr6wFY cZK1ssK4Z64wKnKS9a2rxvtZXkDcbi6MDttaudIDFJHi/0zUVnpaIRsGpJto2wfE q78GRT6Dc3dyOtB67mzePXnooV9f9IDeS4y6EGHaM19zz7f4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQvj6suWBFA2Hk5MynhKZs5SrOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFmOTU2MjAtMDExZS0z ZWRlLTkxNjctY2RhMDFlMThjNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRShYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9hLctAu+9KRA57ZnG3hQ+LD9qE2ZdGczShNxhkxF5SMnAkuhMYVOze qGxc2wNZB8fQGEHLx5fyy/k9ffmDqxWa9ehHP6ssRw6Bfb8N4egbE/zf8MHE1Ntc 32TaOvJ3CFa1fGkWrEN1vz/x9F93Swm0zet61rZke4+Yj+Z4Zv1pYZLA2PZnuBEM tQEP3Uh9FaDLIsIFeDM1n9c99Cyg1SsyNxTrqRcwqGcbCAYOiAC2JWIz44VCGGXz mArb8h4ncn3aMm7+O+kwtC3lgy4qbZtsyQ1/egBZL9hGyUPsG2VpojIQxMfxQICa ImEjspQERKVIc4G3viAyZWm380u/dLI= -----END CERTIFICATE-----Generated at Sat May 10 22:10:16 2025 by rpki-client